PT-2023-20330 · Unknown+2 · Zoneminder+2

Daniel Hofer · Published 2023-02-25 · Updated 2023-11-30 · CVE-2023-25825

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.36.33

Description The issue concerns ZoneMinder, a free, open source Closed-circuit television software application for Linux. It supports IP, USB, and Analog cameras. Log entries can be injected into the database logs, containing a malicious referrer field. This field is unescaped when viewing the logs in the web UI, leading to Cross-site Scripting.

Recommendations For versions prior to 1.36.33, update to version 1.36.33 to resolve the issue. As a temporary workaround, consider restricting access to the web UI to minimize the risk of exploitation. Avoid viewing logs in the web UI until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

ALT-PU-2023-1939

ALT-PU-2023-2056

ALT-PU-2023-4121

ALT-PU-2023-7284

CVE-2023-25825

GHSA-68VF-G4QM-JR6V

Affected Products

Alt Linux

Debian

Zoneminder

References · 59

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/zoneminder_snapshots.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/zoneminder_lang_exec.rb · Exploit
• 🔥 https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-68vf-g4qm-jr6v · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/39xxx/CVE-2022-39290.json · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/39xxx/CVE-2022-39285.json · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/26xxx/CVE-2023-26037.json · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/39xxx/CVE-2022-39289.json · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/39xxx/CVE-2022-39291.json · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25825.json · Exploit
• 🔥 https://github.com/rvizx/CVE-2023-26035 · Exploit
• 🔥 https://github.com/heapbytes/CVE-2023-26035 · Exploit
• 🔥 https://github.com/Yuma-Tsushima07/CVE-2023-26035 · Exploit
• https://github.com/ZoneMinder/zoneminder/commit/e1028c1d7f23cc1e0941b7b37bb6ae5a04364308 · Patch
• https://github.com/ZoneMinder/zoneminder/commit/57bf25d39f12d620693f26068b8441b4f3f0b6c0 · Patch
• https://github.com/ZoneMinder/zoneminder/commit/4637eaf9ea530193e0897ec48899f5638bdd6d81 · Patch